733 matches found
CVE-2025-24990
CVE-2025-24990 — Windows Untrusted Pointer Dereference EoP Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. A privileged Windows component dereferences a pointer it receives from an untrusted context without validating it — giving a...
CVE-2025-50165-x64-Exploit
CVE-2025-50165 Windows Graphics Component RCE x64 Critical Remote Code Execution via malicious JPEG – Windows 11 24H2 unpatched CVSS 9.8 – No privileges, no interaction required root@kitploit: CVE-2025-50165 - windowscodecs.dll untrusted pointer dereference Discovered by Zscaler ThreatLabz Patche...
HVCIPwned
CVE-2024-35250 Local privilege escalation via untrusted pointer dereference in Windows Kernel Streaming driver ks.sys. Data-only exploit — bypasses Hypervisor-protected Code Integrity HVCI. Summary Field| Detail ---|--- CVE| CVE-2024-35250 Component| ks.sys Kernel Streaming Bug Class| Untrusted...
CVE-2024-35250
CVE-2024-35250 PoC per la dereferenziazione di puntatore non attendibile nel driver ks.sys https://github.com/user-attachments/assets/79e8f3e6-91d5-4145-9a78-1d36248c7284 Ringraziamenti Crediti al team Devcore e alla loro ricerca...
CVE-2026-81579
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...
CVE-2026-81579 An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...
CVE-2026-81579
WibuKey for Windows (versions before 6.71 ) is affected by an untrusted pointer dereference in the WibuKey2_64.sys kernel driver (64-bit Windows), which exposes a write-what-where primitive. This enables a local unprivileged user to escalate privileges, potentially executing arbitrary code, spawn...
EUVD-2026-66984
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...
CVE-2026-21250
CVE-2026-21250: Windows HTTP.sys Elevação de Privilégio Local Windows 11 24H2 - Elevação de Privilégio Local 🚨 Análise técnica e recursos para a vulnerabilidade CVE-2026-21250 Windows 11 24H2 / 25H2 - Windows Server 2022/2025 Este repositório contém documentação técnica e recursos para o estudo d...
PT-2026-82480
Name of the Vulnerable Software and Affected Versions WibuKey for Windows versions prior to 6.71 Description An untrusted pointer dereference in the WibuKey2 64.sys kernel driver for 64-bit Windows allows a local attacker to exploit a write-what-where primitive. This primitive enables local...
CVE-2026-68810
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-64910
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-62798
Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally...
CVE-2026-62737
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...
EUVD-2026-56712
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-68810
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-56462
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-56387
Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally...
